CLEANSTART-2026-AT07752 Security fix for CVE-2024-29371 applied in: apache-nifi 2.6.0-r3, apache-nifi 2.7.2-r7, confluent-common-docker 7.6.9-r2, strimzi-kafka-operator 0.47.0-r2

CVE-2024-29371 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GX16359 Security fixes in confluent-common-docker 7.6.9-r3

Package confluent-common-docker version 7.6.9-r3 fixes 4 vulnerabilities: CVE-2025-11226, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-qqpg-mvqg-649v...

CLEANSTART-2026-KF39510 Security fixes in confluent-common-docker 7.6.9-r5

Package confluent-common-docker version 7.6.9-r5 fixes 2 vulnerabilities: ghsa-rwm7-x88c-3g2p, CVE-2026-42577...

CLEANSTART-2026-OL08873 Security fixes in confluent-common-docker 7.6.9-r2

Package confluent-common-docker version 7.6.9-r2 fixes 7 vulnerabilities: CVE-2026-24281, CVE-2026-24308, CVE-2024-29371, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: jenkins, apache-tika-fips, wildfly, neo4j, ontop, kafka-bridge, seata, wso2is, spark-fips, pinot-fips, hadoop-client-modules, flyway, wazuh-indexer, flyway-fips, apache-hop-fips, ruby4.0-jrjackson, spark-kubernetes-operator, s3proxy, kafka-fips, logstash-fips,...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: airflow, wavefront-proxy, apache-pulsar, spark, confluent-kafka, trino, scala, nextflow, thingsboard, druid, apache-nifi, zookeeper, keycloak-config-cli, wildfly, gradle, ruby3.4-jrjackson, ruby4.0-jrjackson, akhq, kafka, infinispan, apicurio-registry,...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: airflow, wavefront-proxy, apache-pulsar, spark, confluent-kafka, trino, scala, nextflow, thingsboard, druid, apache-nifi, zookeeper, keycloak-config-cli, wildfly, gradle, ruby3.4-jrjackson, ruby4.0-jrjackson, akhq, kafka, infinispan, apicurio-registry,...

CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: shfmt, secrets-store-csi-driver-provider-aws, container-object-storage-interface, local-path-provisioner, kuberay-operator, newrelic-fluent-bit-output, kube-vip, grafana-operator, lvm-driver, blobfuse2, vault-benchmark, checksec, git-lfs, k8sgpt-operator,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, gcp-compute-persistent-disk-csi-driver-fips, modelmesh-runtime-adapter, mongodb-kubernetes-operator, cluster-api, kube-logging-operator-custom-runner-fips, mattmoor-chainit, nvidia-nsight-compute-13.2, k8sgpt-operator, bank-vaults,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: tez, druid, cassandra-reaper, gradle-stage0, spark, scala, cassandra, confluent-common-docker...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: tez, druid, cassandra-reaper, gradle-stage0, spark, scala, cassandra, confluent-common-docker...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: sonarqube, celeborn, jenkins-plugin-manager, tez, druid, apache-nifi, cassandra-reaper, wildfly, spdx-tools-java, opensearch, apache-activemq-artemis, jenkins, strimzi-kafka-operator, akhq, trino, apicurio-registry, confluent-common-docker...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: jenkins, wildfly, kafka, neo4j, solr-fips, apicurio-registry, solr, camunda-zeebe, strimzi-kafka-operator, ghidra, confluent-kafka-jre-bcfips, hadoop-client-modules, cassandra-reaper, tez, trino, akhq, hadoop-fips, celeborn, jenkins-plugin-manager, druid, sonarqube,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: go-md2man, skopeo, sftpgo, kube-vip, cert-manager-webhook-pdns, openbao-k8s, supercronic, grpcurl, cloud-provider-aws, harbor-registry, gostatsd, wait-for-port, wire-go, sbom-convert, pluto, nginx-prometheus-exporter, helm-docs, scorecard, whereabouts,...